Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
File:                     rtgBDeTSP_TQ-QBbrJJb23898wo.mft (raw, json)
Hash identifier:          PYFnue0D0DaXXdP8hSdeiBon9b2rGq3cnW4jfEngbIs=
Subject key identifier:   AE:8F:A2:55:56:76:85:25:3A:C1:01:27:52:48:77:8A:75:08:B5:29
Authority key identifier: AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A
Certificate issuer:       /CN=A91651CF/serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
Certificate serial:       0180
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
Manifest number:          0170
Signing time:             Mon 21 Sep 2026 04:50:49 +0000
Manifest this update:     Mon 21 Sep 2026 04:50:49 +0000
Manifest next update:     Mon 28 Sep 2026 04:50:49 +0000
Files and hashes:         1: rtgBDeTSP_TQ-QBbrJJb23898wo.crl (hash: CrvHcRglxwQqADNjSZAySnWNFVuaHAn2i3Ra+7brXJM=)
                          2: C6CDBA3E3B9A11F0B7924C1FC4F9AE02.roa (hash: nnr6N7gsoMtV6N+GfW2wiOurQdubrWp+eixXKsMow9E=)
                          3: 029673283B9E11F0AA109D6CC4F9AE02.roa (hash: mkJn5HcxZSix0xQ2l2GY2Rnt28cmXJs8LaMjzdF8Bqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl
                          rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91651CF, serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
        Validity
            Not Before: Sep 21 04:50:49 2026 GMT
            Not After : Sep 28 04:50:49 2026 GMT
        Subject: CN=6ab0b7a9-53ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:32:01:cf:b8:66:5a:fc:f9:a8:82:94:c4:47:
                    83:7c:68:45:5a:5f:02:fe:82:d6:ce:1c:43:b9:d5:
                    a2:7e:50:25:e9:c9:f6:9f:cf:a4:47:ce:8a:47:89:
                    d4:82:c6:6f:eb:7e:68:84:f6:40:92:10:da:a5:14:
                    ba:73:14:44:67:21:6c:c3:da:b5:db:77:b0:f3:4a:
                    63:ff:e9:d8:fa:4f:3d:7e:4b:d3:aa:9c:74:05:4c:
                    bd:6d:23:2b:00:3a:9a:1b:7d:6e:1e:3f:9a:07:3e:
                    3a:2b:62:93:e9:97:04:80:93:cb:9b:45:88:03:5b:
                    7d:3d:20:c1:ca:9f:32:b5:6d:01:24:7d:fc:0b:e9:
                    88:3b:2f:98:b6:ef:79:ed:81:80:91:c6:e7:bd:83:
                    86:53:db:f4:d7:89:a8:24:4c:c4:78:8b:5b:16:f7:
                    32:39:47:73:a4:90:f8:78:f6:16:4a:75:08:1a:56:
                    d4:db:91:94:ca:72:19:f6:62:16:01:e1:2b:2f:44:
                    19:bd:8d:05:28:0c:3a:12:d1:94:e5:ff:52:d6:a2:
                    15:a8:8e:94:4e:7c:ca:80:29:f0:27:22:03:d3:36:
                    b3:06:f6:82:1a:35:7e:2a:00:35:6f:32:b8:91:ad:
                    48:9c:ca:e4:03:6e:4e:08:66:ac:27:a0:94:be:40:
                    1b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8F:A2:55:56:76:85:25:3A:C1:01:27:52:48:77:8A:75:08:B5:29
            X509v3 Authority Key Identifier:
                keyid:AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:53:2f:90:13:49:f1:58:89:7a:14:14:5d:a1:c6:87:61:ce:
         8a:11:2a:24:11:fc:1e:19:c0:61:38:7c:2f:22:b8:03:1b:4d:
         e3:be:2a:e5:ab:a0:7e:3e:a6:1d:95:7c:c0:7a:69:8a:94:c0:
         df:8d:23:2a:2a:90:b5:92:4d:1b:bc:4e:38:f1:9f:d3:f0:56:
         bf:27:8c:38:de:cc:15:4c:30:32:2d:34:3e:2c:08:90:b8:0a:
         54:d4:00:43:63:82:3f:36:43:51:a5:81:98:4b:a1:4c:f9:e7:
         c2:31:5c:0d:bf:46:58:ab:5c:c5:e3:1f:24:cd:da:9d:a6:32:
         2c:33:e7:75:bb:04:fd:7a:7a:7b:a5:5a:87:f4:f0:9d:74:ad:
         c8:87:b3:2a:13:1b:d8:88:18:5a:2d:75:e2:32:60:1f:57:28:
         c6:98:57:00:48:1a:e8:55:6e:9b:c4:d5:7d:86:cc:eb:80:7a:
         95:d1:d2:0c:8f:79:55:5d:37:65:a5:56:94:58:5e:97:19:3b:
         2d:90:36:bf:02:01:90:0a:72:3f:28:8a:c1:44:c2:33:49:7a:
         fe:fe:bf:c7:62:4e:f5:a6:cc:ca:c6:d1:80:79:54:54:9e:c2:
         b5:cb:e1:fb:36:80:08:13:20:3d:ed:cb:fd:be:1b:a2:83:b1:
         67:a1:11:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:34:16 2026 by rpki-client